After poking around a while finally realized that I can pay Tailscale to have it use Mullvad as an exit node. Think this is finally the right VPN solution for my needs.